Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

What are the practical linux monitoring tools

2025-04-03 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)05/31 Report--

This article mainly introduces the practical linux monitoring tools, which have certain reference value, interested friends can refer to, I hope you can learn a lot after reading this article, let the editor take you to understand it.

Ntop

Ntop is a tool for monitoring network traffic. Using ntop to display the use of the network is more intuitive and detailed than some other network management software. Ntop can even list the network bandwidth utilization of each node computer.

Iftop

Iftop is a real-time traffic monitoring tool similar to top under linux.

Htop

Htop is an interactive process browser under Linux that can be used to replace top commands under Linux.

Nmon

You can view network, CPU, memory, and disk usage.

Fping

They all use the same protocol, ICMP.

The detection mechanism is the same as the default echo is delay.

Fping can detect multiple ip,ping at the same time. It can only output ip segments manually.

The packet size of fping is 56 bytes, and the packet size of ping is 48 (all default bytes of ping are 56).

The default ping spacing for fping is 25 milliseconds, and the default ping is 1 second.

Hping3

Main function

1. Firewall test

2. Practical port scanning

3. Network detection, which can be sliced with different protocols, types of services (TOS) and IP

4. Manually detect the path of MTU (maximum transmission unit)

5. Advanced route tracking, supporting all protocols

6. Remote operating system detection

7. Remote run time detection

8. TCP/IP stack audit

Dstat

There are many parameters to choose from in the dstat command, which you can see through the man dstat command. Most commonly used parameters are these:

-l: display load statistics-m: display memory usage (including used,buffer,cache) Free value)-r: show TCP O statistics-s: show swap partition usage-t: display current time on the first line-fs: display file system statistics (including total number of files and inodes values)-nocolor: do not display colors (sometimes useful)-socket: display network statistics-tcp: show commonly used TCP statistics-udp: show some dynamic data about the monitored UDP interface and its current usage

Ss

The common parameters are:

Ss-A tcp: specifies the viewing protocol

Ss-ltp: displays the process name and PID

Httrack

Website crawler

Ncdu

Disk occupancy analyzer

Monitorix

Network monitoring tool

Netcat

Port scan

Tutorial: https://baike.baidu.com/item/Netcat

Slurm

The following options can be performed in the slurm interface:

◆ I: displaying lx/tx statu

◆ c: switch to the classic interface

◆ r: refresh the interface manually

◆ Q: exit tool

Saidar

Is another CLI system data monitoring and statistics tool that provides monitoring information about disk, network, storage, and SWAP.

Findmnt

Findmnt is a command-line tool built into Linux, which is mainly used to find the mounted file system status. Findmnt can view the mounted devices in the current system and perform mount or unmount operations if necessary.

Ccze

Ccze is very useful for highlighting logs in different colors to assist administrators in distinguishing and viewing analysis.

Ranwhen.py

The ranwhen.py we finally introduced is a python tool that graphically displays system activity.

To use this tool, you need to install python language support:

Sudo apt-add-repository ppa:fkrull/deadsnakessudo apt-get updatesudo apt-get install python3.2 then downloads ranwhen.pywget https://github.com/p-e-w/ranwhen/archive/master.zipunzip master.zip & & cd ranwhen-master to execute ranwhen.pypython3.2 ranwhen.py using the following command

Ethtool

View the properties of the network card

Atop

Atop is very similar to top,htop in that it can monitor all processes, but unlike top and htop, it can log processes on a daily basis for later analysis. It can also show the resource consumption of all processes. It also highlights resources that have reached the critical load.

Apachetop

Apachetop monitors the overall performance of the apache network server. It is mainly based on mytop. It displays the current read process, the number of write processes, and the total number of request processes.

Ftptop

Ftptop provides you with basic information about all current connections to the ftp server, such as the total number of sessions, the number of clients being uploaded and downloaded, and who the clients are.

Mytop

Mytop is a very concise tool for monitoring mysql threads and performance. It allows you to view the database in real time and which queries are being processed.

Powertop

Powertop can help you diagnose problems related to power consumption and power management. It can also help you with power management settings to achieve the most efficient configuration of your server. You can use the tab key to switch tabs.

Iotop

Iotop is used to check the usage of top O and provides a top-like interface for you to display. It shows the rate of reading and writing by column, with each row representing a process. It displays the percentage of time spent by the process when a swap or Ihammer O wait occurs.

Ntopng

Ntopng is an updated version of ntop, which provides a graphical user interface for web monitoring through a browser. It also has other uses, such as geolocation of hosts, display and analysis of network traffic and ip traffic distribution.

Jnettop

Jnettop monitors network traffic in the same way, but more vividly than iftop. It also supports custom text output and can analyze logs in depth in a friendly and interactive way.

BandwidthD

BandwidthD can track the usage of TCP/IP network subnets and build a HTML page visually through png images in the browser. It has a database system that supports search, filtering, multi-sensor and custom reports.

EtherApe

EtherApe graphically displays network traffic and can support more nodes. It can capture real-time traffic information and read it from tcpdump. You can also use a network filter in pcap format to display specific information.

NetHogs

NetHogs breaks the convention that network traffic is counted by protocol or subnet, and it is grouped by process. So, when network traffic surges, you can use NetHogs to see which process is causing it.

Iptraf

Various metrics collected by iptraf, such as TCP connection packets and bytes, port statistics and activity metrics, TCP/UDP communication failures, intra-site packets and bytes.

Ngrep

Ngrep is the grep of the network layer. It uses pcap, which allows packets to be matched by specifying extended regular or hexadecimal expressions.

MRTG

MRTG was originally developed to monitor router traffic, but now it can also monitor network-related things. It collects it every five minutes and then produces a HTML page. It also has the ability to send email alarms.

Bmon

Bmon can monitor and help you debug the network. It can capture network-related statistics and display them in a friendly way. You can also interact with bmon through scripts.

Traceroute

Traceroute is a built-in tool that displays routing and measures the delay of packets in the network.

IPTState

IPTState allows you to observe how traffic passes through iptables and sort it according to the criteria you specify. The tool also allows you to delete status information from iptables tables.

Darkstat

Darkstat captures network traffic and calculates usage statistics. The report is saved in a simple HTTP server, which provides you with a great graphical user interface.

VnStat

VnStat is a network traffic monitoring tool, its data statistics are provided by the kernel, and its consumption of system resources is very small. After the system restarts, the data it collects still exists. Artistic system administrators can use its color option.

Netstat

Netstat is a built-in tool that displays the number of TCP network connections, routing tables and network interfaces, and is used to find problems in the network.

Nmap

Nmap can scan the open ports of your server and detect which operating system you are using. But you can also use it for other purposes related to SQL injection vulnerabilities, network discovery, and testing.

MTR

MTR combines the functions of traceroute and ping into a network diagnostic tool. When using this tool, it limits the number of hops of a single packet and then monitors where they arrive when they expire. And repeat it every second.

Tcpdump

Tcpdump will output information that matches the captured packet according to the expression you specified on the command line. You can also save this data and analyze it further.

Justniffer

Justniffer is the tcp packet sniffer. With this sniffer you can choose whether to collect low-level data or high-level data. It also allows you to generate logs in a custom way. For example, imitate the access log of Apache.

Conky

Conky can monitor a lot of operating system data. It supports IMAP and POP3, and even many popular music players! For the convenience of different people, you can use your own Lua script or program to extend it.

Glances

Use Glances to monitor your system, which is designed to show you the most information in the smallest space. It can be run in client / server mode, and it also has the ability of remote monitoring. It also has a Web interface.

RRDtool

RRDtool is a tool for dealing with RRD databases. RRDtool is designed to deal with time series data, such as CPU load, temperature, etc. The tool provides a way to extract RRD data and display it in a graphical interface.

Monit

In the event of a failure, monit has the ability to send an alert and restart the service. It can check all kinds of data, and you can write a script for monit, which has a Web user interface to share the pressure on your eyes.

Linux process explorer

Linux process explorer is an activity monitor similar to OSX or Windows. It is more widely used than top or ps. You can check the memory consumption of each process and the usage of CPU.

Df

Df, which stands for disk free, is a program pre-installed on all UNIX systems to display the available disk space of the file system to which the user has access.

Discus

Discus is similar to df in that it aims to improve df by using more attractive features such as colors, graphics and numbers.

Xosview

Xosview is a classic system monitoring tool that gives you a simple overview of different parts, including IRQ.

Net-SNMP

SNMP is the simple Network Management Protocol, which is used by the Net-SNMP toolkit to help you collect accurate information about the server.

Incron

Incron allows you to monitor a directory tree and then take action against these changes. If you want a new file to appear in directory'a', copy it to directory 'baked', which is exactly what incron can do.

Vmstat

Vmstat (virtual memory statistics) is a small built-in tool that monitors and displays the memory of the machine.

Uptime

This Mini Program can quickly show how long your machine has been running, how many users are currently logged in and the average load of the system over the past 1 minute, 5 minutes and 15 minutes.

Mpstat

Mpstat is a built-in tool that monitors cpu usage. The most common way to use it is mpstat-P ALL, which provides you with information about cpu usage. You can also update cpu usage intermittently.

Pmap

Pmap is a built-in tool that reports the memory mapping of a process. You can use this command to find out the cause of the memory bottleneck.

Ps

This command will give you an overview of all current processes. You can use the ps-A command to view all processes.

Sar

Sar is part of the sysstat package that helps you collect, report, and save metrics for different systems. Using different parameters, it will provide you with CPU, memory and Imax O usage and other things.

Collectl

Similar to sar,collectl collecting your machine's performance metrics. By default, cpu, network, and disk statistics are displayed, but it actually collects a lot of information. Unlike sar, collectl can handle smaller units than seconds, it can be fed directly into the drawing tool, and the monitoring process of collectl is more extensive.

Iostat

Iostat is also part of the sysstat package. This command is used to monitor the input / output of the system. The report can be used for system tuning to better adjust the input / output load of the hard drive on your machine.

Free

This is a built-in command that displays the amount of memory available on your machine and the amount of memory used. It can also show the size of the buffer used by the kernel at some point.

GKrellM

GKrellm is a graphical application that monitors the status of your hardware, such as CPU, memory, hard disk, network interface, and more. It can also monitor and start the email reader of your choice.

Gnome

Gnome system monitor is a basic system monitoring tool, which can view the process dependency through a tree structure, kill the process and adjust the process priority, and display the indicators of all servers in the form of a chart.

GoAccess

GoAccess is a real-time network log analyzer that can analyze the access logs of apache, nginx and amazon cloudfront. It can also output data to HTML,JSON or CSV format. It will give you basic statistics, traffic, 404 pages, visitor location, and other things.

Logwatch

Logwatch is a log analysis system. It analyzes the log of the system and creates an analysis report for the part you specify. It gives you a report every day so that you can spend less time analyzing the log.

Ifconfig

Ifconfig is a built-in tool for configuring network interfaces. Behind most network monitoring tools, ifconfig is used to set the Nic to chaos mode to capture all packets. You can manually execute ifconfig eth0 promisc to enter chaos mode and use ifconfig eth0-promisc to return to normal mode.

Infrastructure Monitoring tool

Server Density

Our server monitoring tool has a web interface that allows you to set the alarm and view the network metrics of all systems through a chart. You can also set up monitoring sites, whether online or not. Server Density allows you to set user permissions, and you can extend your monitoring according to our plug-in or api. The service already supports plug-ins for Nagios.

OpenNMS

OpenNMS has four main functional areas: event management and notification; discovery and configuration; service monitoring and data collection. It is designed to be customized in a variety of network environments.

SysUsage

SysUsage continuously monitors your system through Sar and other system commands. Once the threshold is reached, it can also give an alarm notification. SysUsage itself can also collect all the statistics and store them in one place. It has a Web interface that allows you to view all the statistics.

Brainypdm

Brainypdm is a data management and monitoring tool that collects data from nagios or other regular sources and displays them graphically. It is cross-platform, Web-based and customizable.

PCP

PCP can collect metrics from multiple hosts and is very efficient. It also has a plug-in framework, so you can have it collect metrics that are important to you. You can access graphical data through any Web interface or GUI. It is more suitable for large-scale monitoring system.

KDE system daemon

This tool is both a system monitor and a task manager. You can view the service metrics of multiple machines through the worksheet, and if you need to kill a process or start a process, it can be done in the KDE system daemon.

Munin

Munin is both a network and a system monitoring tool. When an index exceeds a given threshold, it provides an alarm mechanism. It uses RRDtool to create charts, and it also has a Web interface to display these charts. It emphasizes plug-and-play functionality and there are many plug-ins available.

Nagios

Nagios is a system and network monitoring tool that helps you monitor multiple servers. It also has an alarm function when an error occurs. Its platform also has a lot of plug-ins.

Zenoss

Zenoss provides a Web interface that allows you to monitor all system and network metrics. In addition, it can automatically discover network resources and modify network configuration. And will remind you to take action, it also supports Nagios plug-ins.

Cacti

(same as the previous one!) Cacti is a network graphics solution that uses RRDtool for data storage. It allows users to vote at predetermined intervals and display the results graphically. Cacti can monitor the source of your choice through the shell script extension.

.Zabbix

Zabbix is an open source infrastructure monitoring solution. It uses many databases to store monitoring statistics. Its core is to write in C language and use PHP in the front end. If you don't like installing the agent, Zabbix is probably the best choice.

Collectd

Collectd is a Unix daemon that collects all monitoring data. It uses a modular design and uses plug-ins to fill some gaps. This keeps collectd lightweight and customizable.

Observium

Observium is a monitoring platform for automatically discovering networks, supporting a large number of hardware platforms and operating systems. Observium focuses on providing a beautiful, powerful, simple and intuitive interface to show the health and status of the network.

Nload

This is a command line tool to monitor the throughput of the network. It is neat because it uses two charts and other useful data such as the total amount of data transmitted to visualize inbound and outbound traffic. You can install it using the following methods:

Yum install nload

Or

Sudo apt-get install nload

SmokePing

SmokePing can track your network delays and visualize them. There are various delay measurement plug-ins developed for SmokePing. If the graphical user interface is very important to you, there is now a plug-in under development to implement this feature.

Shinken monitoring

Shinken is a monitoring framework that uses python to completely rewrite Nagios. Its aim is to increase flexibility and manage a larger environment. But still keep all the nagios configurations and plug-ins.

Thank you for reading this article carefully. I hope the article "what are the practical linux monitoring tools" shared by the editor will be helpful to you? at the same time, I also hope you will support us and pay attention to the industry information channel. More related knowledge is waiting for you to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report